mauriceboe/TREK v3.0.18

on GitHub

⚠️ Security release — update recommended

This release patches a security vulnerability. If you are running any version prior to v3.0.18, updating is recommended.

A security advisory will be published shortly. In the meantime, see PR #984 for technical details.

How to update: https://github.com/mauriceboe/TREK/wiki/Updating

What's Changed

Security

• fix(security): equalise login response timing to prevent user enumeration via timing side-channel (CWE-203, CWE-208) — [#984](#984) by @jubnl

Bug fixes

• fix: align public share itinerary order with daily planner — [#983](#983) / [#985](#985)
• fix: shift owner vacancy entries when update_trip moves the trip window — [#983](#983)

Full Changelog: v3.0.17...v3.0.18